WARNING: "MilkCat Animations" mod contained malware (info-stealer)

[blackprop15]

⚠️ WARNING: "MilkCat Animations" mod contained malware (info-stealer) check your PC if you downloaded it

I'm posting this to warn the community. A few days ago my PC was infected by an info-stealer (a malware family that steals saved browser passwords, cookies/sessions, and Discord tokens). After a full investigation, the infection was traced to a Sims 4 script mod called "MilkCat Animations", which I had downloaded from here.

What I observed:

The malware landed on disk within ~2 seconds of the game finishing loading its mods.
Unlike every other script mod I had installed, MilkCat's .ts4script contained obfuscated code and an encrypted payload disguised as a normal Python file — a clear sign it wasn't a real animation mod.
The file and the uploader's account have since been removed from the site, which fits the pattern of a malicious upload via a hacked or fake account.
If you downloaded "MilkCat Animations", please do the following:

Delete the mod immediately (all .ts4script files associated with it).
Change the passwords of any account whose password was saved in Chrome/Edge especially email, and anything with payment info. Prioritize reused passwords.
Log out of all sessions on your important accounts (a stolen cookie survives a password change until you do).
Reset your Discord password and enable 2FA Discord tokens are a primary target.
Run a scan with a reputable tool (e.g. Malwarebytes) as a second opinion.
Enable 2FA everywhere you can  it makes a stolen password useless.
Stay safe, and please only install script mods from trusted, well-known creators. When in doubt, a .ts4script is just a ZIP you can inspect it before installing.

[prada4m8]

Merci